This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/810cf1-cf41-4cbb-a53a-493da9cc4c0c/1/9us1U0TzVfLF8cawuowwnBFDxsc.mft File: 9us1U0TzVfLF8cawuowwnBFDxsc.mft (raw, json) Hash identifier: Qnsqw2rY1qPJLHJNEie+Im4AjFRVU27d/06rqmAGwA0= Subject key identifier: C9:C4:12:77:B1:6B:B6:DA:18:11:5A:79:0D:8D:CE:B0:27:66:95:22 Authority key identifier: F6:EB:35:53:44:F3:55:F2:C5:F1:C6:B0:BA:8C:30:9C:11:43:C6:C7 Certificate issuer: /CN=f6eb355344f355f2c5f1c6b0ba8c309c1143c6c7 Certificate serial: 019B3FB631F7DFB3D79C82B6CBA3DCFB760C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9us1U0TzVfLF8cawuowwnBFDxsc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/810cf1-cf41-4cbb-a53a-493da9cc4c0c/1/9us1U0TzVfLF8cawuowwnBFDxsc.mft Manifest number: 1261 Signing time: Sun 21 Dec 2025 07:01:03 +0000 Manifest this update: Sun 21 Dec 2025 07:01:03 +0000 Manifest next update: Mon 22 Dec 2025 07:01:03 +0000 Files and hashes: 1: 9us1U0TzVfLF8cawuowwnBFDxsc.crl (hash: mhwHx3dWc6ZP04vpYdRjFW/EriPV008kAhd9vQ1VB90=) 2: xm2GnCrITkLspXymDcS4A7YJbbI.roa (hash: +DAgDZIg9Wj4wTdH4O9JnrjTmjk3rUCiBhMUo5eAXI8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/810cf1-cf41-4cbb-a53a-493da9cc4c0c/1/9us1U0TzVfLF8cawuowwnBFDxsc.crl rsync://rpki.ripe.net/repository/DEFAULT/41/810cf1-cf41-4cbb-a53a-493da9cc4c0c/1/9us1U0TzVfLF8cawuowwnBFDxsc.mft rsync://rpki.ripe.net/repository/DEFAULT/9us1U0TzVfLF8cawuowwnBFDxsc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:b6:31:f7:df:b3:d7:9c:82:b6:cb:a3:dc:fb:76:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f6eb355344f355f2c5f1c6b0ba8c309c1143c6c7 Validity Not Before: Dec 21 07:01:03 2025 GMT Not After : Dec 22 07:01:03 2025 GMT Subject: CN=c9c41277b16bb6da18115a790d8dceb027669522 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:b3:9a:ac:42:3f:3d:87:2a:fc:ae:14:18:68: a7:da:49:67:31:16:ab:c4:8d:a3:8b:0e:08:30:bf: b8:c9:44:e4:4b:b6:a1:99:04:71:cb:44:19:69:69: a4:0a:12:f2:df:79:38:59:9b:c1:7a:0e:3a:46:38: 9e:54:ec:c2:53:be:9a:02:44:85:2b:d4:57:03:8e: 8c:01:70:3a:49:f4:33:42:68:cb:9b:b0:35:7d:d2: 08:03:b4:1d:f4:44:c6:a6:69:29:73:2c:a1:a1:34: 09:20:24:2b:de:14:59:28:c2:0f:4a:52:44:87:01: c1:0b:f2:02:0a:44:1f:2a:1e:2f:89:e7:8a:1c:9c: 1c:dc:df:01:b1:ea:40:89:05:73:b1:c2:bc:42:f5: c7:a3:21:43:ed:5f:3e:a6:bc:89:6a:d8:bd:1b:e4: 1a:58:67:da:0a:66:e4:61:44:b2:48:02:e8:e8:97: c2:ed:51:65:86:60:6b:0a:4e:95:e8:6f:4c:02:cf: cd:f3:7d:b2:5b:98:8a:27:4b:a4:be:75:e8:14:8c: 38:9a:c5:7f:f7:59:3e:21:e2:be:36:e2:36:b6:e6: 69:03:d0:b5:8f:56:48:ae:2d:67:60:0a:6a:e8:88: c2:d2:68:39:e4:e6:ca:f8:73:57:aa:7a:89:41:80: 77:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:C4:12:77:B1:6B:B6:DA:18:11:5A:79:0D:8D:CE:B0:27:66:95:22 X509v3 Authority Key Identifier: keyid:F6:EB:35:53:44:F3:55:F2:C5:F1:C6:B0:BA:8C:30:9C:11:43:C6:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9us1U0TzVfLF8cawuowwnBFDxsc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/810cf1-cf41-4cbb-a53a-493da9cc4c0c/1/9us1U0TzVfLF8cawuowwnBFDxsc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/810cf1-cf41-4cbb-a53a-493da9cc4c0c/1/9us1U0TzVfLF8cawuowwnBFDxsc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:36:a1:9e:cd:d0:67:24:c5:78:b0:9e:11:28:dc:6a:7e:d7: 47:dd:85:5a:46:e9:e4:ab:36:92:82:e5:4f:cd:93:85:8d:a6: 7e:8b:98:66:7d:54:f4:6c:4f:21:79:ea:c4:f8:35:0d:08:f6: fb:44:d0:f7:b6:61:54:bc:46:43:ad:30:76:fb:9b:96:00:f2: e2:35:36:77:7b:f9:c4:6c:40:64:f3:66:ac:42:4f:47:80:51: 04:16:9d:13:63:99:cb:ff:e9:3f:04:0e:c4:d8:4e:ab:67:9a: 1f:da:a5:62:d8:4a:8e:c9:ae:9c:03:9b:fa:e5:f8:41:d3:ac: 86:3f:19:4d:49:ef:52:ea:d4:ba:82:a4:a0:15:7c:10:56:9c: a0:4c:80:54:87:43:88:01:57:13:39:32:57:91:5a:e5:db:f5: 32:c5:40:f7:99:2b:fb:f2:79:a5:31:09:1c:cb:2b:b5:ad:2a: 00:f4:ee:7c:bf:58:1a:20:c6:4a:f8:14:fc:36:e8:ba:1a:a4: 73:21:cc:38:7c:08:c6:66:46:e9:0d:87:23:a8:aa:31:52:60: 86:af:41:03:81:37:ce:57:90:ee:ab:b3:5f:20:d8:2e:3a:28: 14:a1:15:cb:a2:d4:7c:97:2a:78:9b:82:20:fb:3c:59:cd:cc: d8:34:d1:54 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/tjH337PXnIK2y6Pc+3YMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2ZWIzNTUzNDRmMzU1ZjJjNWYxYzZiMGJhOGMzMDljMTE0 M2M2YzcwHhcNMjUxMjIxMDcwMTAzWhcNMjUxMjIyMDcwMTAzWjAzMTEwLwYDVQQD EyhjOWM0MTI3N2IxNmJiNmRhMTgxMTVhNzkwZDhkY2ViMDI3NjY5NTIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmLOarEI/PYcq/K4UGGin2klnMRar xI2jiw4IML+4yUTkS7ahmQRxy0QZaWmkChLy33k4WZvBeg46RjieVOzCU76aAkSF K9RXA46MAXA6SfQzQmjLm7A1fdIIA7Qd9ETGpmkpcyyhoTQJICQr3hRZKMIPSlJE hwHBC/ICCkQfKh4vieeKHJwc3N8BsepAiQVzscK8QvXHoyFD7V8+pryJati9G+Qa WGfaCmbkYUSySALo6JfC7VFlhmBrCk6V6G9MAs/N832yW5iKJ0ukvnXoFIw4msV/ 91k+IeK+NuI2tuZpA9C1j1ZIri1nYApq6IjC0mg55ObK+HNXqnqJQYB3QwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMnEEnexa7baGBFaeQ2NzrAnZpUiMB8GA1UdIwQY MBaAFPbrNVNE81XyxfHGsLqMMJwRQ8bHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOXVzMVUwVHpWZkxGOGNhd3Vvd3duQkZEeHNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS84MTBjZjEtY2Y0MS00Y2JiLWE1M2Et NDkzZGE5Y2M0YzBjLzEvOXVzMVUwVHpWZkxGOGNhd3Vvd3duQkZEeHNjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS84MTBjZjEtY2Y0MS00Y2JiLWE1M2EtNDkzZGE5Y2M0YzBj LzEvOXVzMVUwVHpWZkxGOGNhd3Vvd3duQkZEeHNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKTahns3Q ZyTFeLCeESjcan7XR92FWkbp5Ks2koLlT82ThY2mfouYZn1U9GxPIXnqxPg1DQj2 +0TQ97ZhVLxGQ60wdvublgDy4jU2d3v5xGxAZPNmrEJPR4BRBBadE2OZy//pPwQO xNhOq2eaH9qlYthKjsmunAOb+uX4QdOshj8ZTUnvUurUuoKkoBV8EFacoEyAVIdD iAFXEzkyV5Fa5dv1MsVA95kr+/J5pTEJHMsrta0qAPTufL9YGiDGSvgU/Dbouhqk cyHMOHwIxmZG6Q2HI6iqMVJghq9BA4E3zleQ7quzXyDYLjooFKEVy6LUfJcqeJuC IPs8Wc3M2DTRVA== -----END CERTIFICATE-----Generated at Sun Dec 21 13:07:27 2025 by rpki-client